CVE-2026-8743: Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization
A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ranuefindbyamfuengapid of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. It is suggested to install a patch to address this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS (AMF/MME)to a version that resolves this vulnerability.Patch 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8743?
CVE-2026-8743 is classified as a vulnerability that can lead to improper authorization within the Open5GS AMF/MME component.
How do I fix CVE-2026-8743?
To mitigate the effects of CVE-2026-8743, you should upgrade Open5GS to version 2.7.7 or later.
What systems are affected by CVE-2026-8743?
CVE-2026-8743 affects Open5GS versions up to and including 2.7.6.
What is the impact of CVE-2026-8743?
The impact of CVE-2026-8743 is that it allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access.
Who is responsible for the CVE-2026-8743 vulnerability?
The CVE-2026-8743 vulnerability was identified in the Open5GS project and is related to a specific function in its AMF/MME context.